Which of the following are components defined within an Enterprise Security Architecture Framework? (Select THREE).

Implementation run-sheets are operational, task-level documents used during deployment activities, not structural components of an architecture framework.

Solution designs are project-specific deliverables produced by applying the architecture framework, not components that define the framework itself.

Business capabilities are a core architectural element that define what the organization must be able to do, forming the foundation for aligning security controls to business functions across the enterprise.

Solution architectures are outputs created for specific initiatives using the framework as a guide, not elements that compose the framework.

Business requirements documents are project-initiation artifacts that feed into specific solution efforts, not enterprise architecture framework components.

Reference models provide standardized patterns and reusable guidance within the architecture framework, enabling consistent security design across all domains of the enterprise.

Business cases are financial and strategic justification documents for individual initiatives, not components that define or structure an architecture framework.

Business vision and drivers represent the strategic context that shapes the entire security architecture, ensuring security objectives are traceable to organizational goals.